IT Compliance and Security Analyst

We are seeking an experienced IT Compliance and Security Analyst with strong expertise in the information security domain. In this role, you will handle compliance and security-related inquiries from both internal teams and external customers. Your responsibilities will include reviewing each request carefully, preparing accurate and well-supported responses based on company policies and documentation, obtaining approval from the Chief Information Security Officer (CISO), and delivering the finalized responses to the requesters within agreed timelines.

Key Responsibilities

- Receive and review compliance and security queries from internal stakeholders and external customers concerning documents, policies, and services.
- Utilize your information security knowledge to assess each query and ensure responses accurately reflect the organization’s security controls and practices.
- Research queries thoroughly to identify relevant policies, procedures, certifications, and supporting evidence.
- Draft clear and precise responses, including security questionnaires, due-diligence requests, and audit-related inquiries.
- Share approved responses and documentation with requesters promptly, adhering to established turnaround times.
- Maintain a detailed tracker of incoming requests, including their status, approvals, and response timelines.
- Keep security and compliance documentation well-organized, version-controlled, and up to date.
- Collaborate with IT, Legal, HR, and other departments to gather necessary information and evidence.
- Support internal and external audits, assessments, and control reviews as required.
- Identify recurring queries and contribute to building a library of standard, pre-approved responses to improve efficiency.

Required Qualifications

- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field.
- 3 to 5 years of experience in IT compliance, information security compliance, Governance, Risk, and Compliance (GRC), or security assurance.
- Strong knowledge and practical experience in information security, including security policies, risk management, security controls, and best practices.
- Working knowledge of industry frameworks and standards such as ISO 27001, SOC 2, NIST, and GDPR.
- Understanding of general IT controls, including access management, change management, backup and disaster recovery, and vulnerability management.
- Experience in completing customer security questionnaires and supporting audit processes.
- Excellent written communication skills with the ability to explain technical and compliance topics clearly and concisely.
- Strong attention to detail and good document control practices.
- Ability to manage multiple requests simultaneously and meet deadlines effectively.
- Relevant certifications such as ISO 27001 Lead Implementer or Lead Auditor, CISA, CISM, or Security+ are highly desirable.
- Experience working with international or enterprise clients.

Compensation and Work Location

The position offers a monthly salary starting from Rs 150,000. The role requires in-person attendance at the designated work location.

This opportunity is ideal for a detail-oriented professional who thrives in a dynamic environment and is passionate about maintaining high standards of IT compliance and security.